FolioVision FV Player 8

• CVE-2026-95807 Medium 6.4 FV Player 8 <= 8.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute 0.2%
• CVE-2026-42699 High 7.1 WordPress FV Player 8 plugin <= 8.1.8 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-83526 High 8.8 FV Player 8 <= 8.1.7 - Authenticated (Subscriber+) Arbitrary File Upload via videos[].fv_wp_flowplayer_field_src Parameter 0.6%